Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/aqDCVXwnHu-F0pAD-QhJDUXmJY0.roa
File: aqDCVXwnHu-F0pAD-QhJDUXmJY0.roa (raw, json)
Hash identifier: x/wp5/W+unWJ7x+1dXExBT5+t7T5OfREXWgvurdnoDY=
Subject key identifier: 6A:A0:C2:55:7C:27:1E:EF:85:D2:90:03:F9:08:49:0D:45:E6:25:8D
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 180B4CA9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/aqDCVXwnHu-F0pAD-QhJDUXmJY0.roa
Signing time: Tue 12 Apr 2022 12:20:15 +0000
ROA not before: Tue 12 Apr 2022 12:20:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210542
IP address blocks: 185.147.35.0/24 maxlen: 24
2a06:a000:1b0::/44 maxlen: 48
2a06:a001:a060::/44 maxlen: 48
2a06:a001:a000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403393705 (0x180b4ca9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 12 12:20:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6aa0c2557c271eef85d29003f908490d45e6258d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0d:db:18:20:c3:ae:87:6c:c7:a6:81:05:27:
64:b6:6a:55:13:45:e5:95:7d:f8:98:0e:33:06:3a:
74:81:8a:22:87:66:df:f6:f5:10:79:ad:a2:81:f1:
41:53:9e:96:5c:49:8f:5a:79:16:17:1c:34:85:8e:
94:fa:41:c5:0c:18:04:18:ee:d1:14:f7:ba:d0:8d:
45:68:ba:4c:ac:5e:05:31:c1:e8:e8:68:b2:b5:f0:
d7:08:92:8b:81:f8:12:6b:3b:20:d7:30:bd:3e:97:
09:c3:c8:4f:b4:51:a5:21:b8:7f:1b:84:d2:67:e5:
4d:db:f4:25:65:7a:cd:57:05:ac:1c:73:af:31:9b:
b6:eb:46:cb:ed:92:16:67:d9:f7:b1:31:af:5a:f5:
15:ee:7e:84:26:60:1f:d1:6a:8b:2a:1e:92:cd:92:
5a:7b:f4:98:1c:b0:37:ce:e8:37:8b:ad:b0:56:08:
92:38:79:0d:d5:f4:c7:a7:d9:ac:5f:dc:37:c4:55:
a6:10:d8:8a:66:67:56:08:10:b2:cf:66:ab:e6:a2:
7d:dc:fb:7e:09:23:7c:91:32:81:bd:aa:1b:af:00:
09:9c:03:fc:4e:29:8d:31:70:4d:7d:4e:de:99:9b:
4b:bd:25:ff:f2:29:37:72:18:43:90:36:0f:4c:9d:
ce:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A0:C2:55:7C:27:1E:EF:85:D2:90:03:F9:08:49:0D:45:E6:25:8D
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/aqDCVXwnHu-F0pAD-QhJDUXmJY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.35.0/24
IPv6:
2a06:a000:1b0::/44
2a06:a001:a000::/44
2a06:a001:a060::/44
Signature Algorithm: sha256WithRSAEncryption
66:3e:48:2f:5d:77:be:d7:c7:f6:8f:eb:e2:b9:cc:cf:23:d4:
13:04:ad:81:4a:50:2f:42:ad:e9:c5:e3:0c:b5:61:b0:7a:f9:
a5:d9:8a:50:1a:81:2f:fc:f1:33:0b:37:90:65:b8:e2:f9:fe:
c9:7b:8d:26:21:74:4b:98:24:8e:56:5b:80:d2:b5:9e:0b:b0:
61:2c:62:36:b0:f7:11:5c:69:d6:3e:14:a8:44:46:54:c6:45:
51:df:0e:55:b1:fd:d9:ab:d5:95:6b:39:33:ef:94:f3:3a:64:
23:22:82:01:fc:14:b4:08:12:58:c9:3f:f5:4c:0a:06:72:39:
47:eb:89:04:6a:16:73:c8:48:ab:66:44:46:c5:93:35:bf:8d:
5d:17:73:b0:2d:3f:35:c5:e2:90:c8:4d:c2:b9:95:f7:19:9d:
13:09:44:4d:e9:02:96:18:ee:bb:24:20:0f:f6:08:7b:a6:1c:
93:f1:ae:64:96:c2:58:b9:0c:e9:bd:8a:88:91:29:e5:19:cd:
67:69:04:28:f6:54:31:0a:46:5e:40:91:a0:65:ee:23:6b:fd:
26:94:ad:84:44:ea:43:6c:dd:ab:3c:8a:e8:cb:75:a6:dc:90:
b5:07:ac:cf:2d:02:1a:5a:f0:de:07:5b:8e:50:0f:e5:fb:94:
53:4f:f9:18
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIEGAtMqTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDQx
MjEyMjAxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmFhMGMyNTU3YzI3
MWVlZjg1ZDI5MDAzZjkwODQ5MGQ0NWU2MjU4ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKMN2xggw66HbMemgQUnZLZqVRNF5ZV9+JgOMwY6dIGKIodm
3/b1EHmtooHxQVOellxJj1p5FhccNIWOlPpBxQwYBBju0RT3utCNRWi6TKxeBTHB
6OhosrXw1wiSi4H4Ems7INcwvT6XCcPIT7RRpSG4fxuE0mflTdv0JWV6zVcFrBxz
rzGbtutGy+2SFmfZ97Exr1r1Fe5+hCZgH9Fqiyoeks2SWnv0mBywN87oN4utsFYI
kjh5DdX0x6fZrF/cN8RVphDYimZnVggQss9mq+aifdz7fgkjfJEygb2qG68ACZwD
/E4pjTFwTX1O3pmbS70l//IpN3IYQ5A2D0ydzvECAwEAAaOCAiwwggIoMB0GA1Ud
DgQWBBRqoMJVfCce74XSkAP5CEkNReYljTAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L2FxRENWWHduSHUtRjBwQUQtUWhKRFVYbUpZMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBC
BggrBgEFBQcBBwEB/wQzMDEwDAQCAAEwBgMEALmTIzAhBAIAAjAbAwcEKgagAAGw
AwcEKgagAaAAAwcEKgagAaBgMA0GCSqGSIb3DQEBCwUAA4IBAQBmPkgvXXe+18f2
j+viuczPI9QTBK2BSlAvQq3pxeMMtWGwevml2YpQGoEv/PEzCzeQZbji+f7Je40m
IXRLmCSOVluA0rWeC7BhLGI2sPcRXGnWPhSoREZUxkVR3w5Vsf3Zq9WVazkz75Tz
OmQjIoIB/BS0CBJYyT/1TAoGcjlH64kEahZzyEirZkRGxZM1v41dF3OwLT81xeKQ
yE3CuZX3GZ0TCURN6QKWGO67JCAP9gh7phyT8a5klsJYuQzpvYqIkSnlGc1naQQo
9lQxCkZeQJGgZe4ja/0mlK2EROpDbN2rPIroy3Wm3JC1B6zPLQIaWvDeB1uOUA/l
+5RTT/kY
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:02 2024 by rpki-client on console-ams.rpki-client.org